com.atlassian.plugins.rest.common.security.jersey
Class XsrfResourceFilter

java.lang.Object
  com.atlassian.plugins.rest.common.security.jersey.XsrfResourceFilter

All Implemented Interfaces:

com.sun.jersey.spi.container.ContainerRequestFilter, com.sun.jersey.spi.container.ResourceFilter

public class XsrfResourceFilter
extends java.lang.Object
implements com.sun.jersey.spi.container.ResourceFilter, com.sun.jersey.spi.container.ContainerRequestFilter

A filter that filters requests that need XSRF protection.

For now it only checks to see if there is a header. Later when SAL has XSRF token support, maybe we can implement token checking.

Since:

2.4

Field Summary

static java.lang.String	NO_CHECK
static java.lang.String	TOKEN_HEADER

Constructor Summary

XsrfResourceFilter()

Method Summary

com.sun.jersey.spi.container.ContainerRequest	filter(com.sun.jersey.spi.container.ContainerRequest request)
com.sun.jersey.spi.container.ContainerRequestFilter	getRequestFilter()
com.sun.jersey.spi.container.ContainerResponseFilter	getResponseFilter()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

TOKEN_HEADER

public static final java.lang.String TOKEN_HEADER

See Also:

Constant Field Values

NO_CHECK

public static final java.lang.String NO_CHECK

See Also:

Constant Field Values

Constructor Detail

XsrfResourceFilter

public XsrfResourceFilter()

Method Detail

filter

public com.sun.jersey.spi.container.ContainerRequest filter(com.sun.jersey.spi.container.ContainerRequest request)

Specified by:

filter in interface com.sun.jersey.spi.container.ContainerRequestFilter

getRequestFilter

public com.sun.jersey.spi.container.ContainerRequestFilter getRequestFilter()

Specified by:

getRequestFilter in interface com.sun.jersey.spi.container.ResourceFilter

getResponseFilter

public com.sun.jersey.spi.container.ContainerResponseFilter getResponseFilter()

Specified by:

getResponseFilter in interface com.sun.jersey.spi.container.ResourceFilter